
$ rpki-client -vvf repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
File: EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft (raw, json)
Hash identifier: FKvYUWyp9W6thH8oJo2gend0nrBL4XymMVatDIHzc8s=
Subject key identifier: 83:17:DC:65:7C:58:94:B6:10:0D:70:95:07:7B:CE:44:E5:06:08:8D
Authority key identifier: EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66
Certificate issuer: /CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
Certificate serial: 723F8F97F259797E1B55CCA0FCCA9779DB345E79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
Manifest number: 0139
Signing time: Sat 18 Apr 2026 15:21:51 +0000
Manifest this update: Sat 18 Apr 2026 15:16:51 +0000
Manifest next update: Tue 21 Apr 2026 20:03:51 +0000
Files and hashes: 1: EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl (hash: Mc/1tVSaXu95r/7MjvV7jL2kTmjlJ9sYh/RTTjtD+aE=)
2: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: Nexvolg3a9KYuxAOmszuVwqwMOBphtNqyIx9bMVtJwI=)
3: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: 9X1k1CFvjRP6hohWpf4Jt4fciGzs6Bvi2Ypx1Z0gxII=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl
rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 20:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3f:8f:97:f2:59:79:7e:1b:55:cc:a0:fc:ca:97:79:db:34:5e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
Validity
Not Before: Apr 18 15:16:51 2026 GMT
Not After : Apr 21 20:03:51 2026 GMT
Subject: CN=8317DC657C5894B6100D7095077BCE44E506088D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:2d:33:a1:57:f4:f0:86:55:cf:09:da:58:
0a:63:5b:57:dd:d2:f8:18:09:7c:a8:3b:bc:65:e7:
f2:15:00:f1:e3:0f:1f:5d:03:69:0f:79:67:c3:40:
e8:1a:29:19:0c:fc:b5:55:8f:6b:97:58:93:d8:3b:
a6:69:7b:21:35:91:f8:37:62:78:ed:4d:06:d7:fc:
56:cd:99:09:75:d4:53:11:f9:b4:bd:1e:3b:6f:c6:
9d:fe:99:bf:64:71:99:44:a2:e8:a0:90:d2:b8:cc:
e8:f4:1f:c9:cd:48:67:a6:72:15:59:97:8c:f4:30:
9f:e1:f3:31:e1:4e:44:2d:8f:fb:64:f3:ce:19:d2:
99:04:77:41:34:7d:1d:69:20:d6:b7:81:a0:e8:6c:
4f:86:23:f6:61:23:04:fe:d6:f9:9f:2a:bb:f5:f5:
a9:60:b8:ac:f6:56:0c:ed:9c:a3:90:2a:f2:f2:30:
b4:e1:b2:05:45:b9:4d:38:99:05:a3:e5:73:2f:41:
e8:51:11:74:d7:b6:58:aa:fc:e4:5e:3e:e7:45:71:
eb:d9:1f:83:2e:30:05:99:ce:53:e0:cf:6f:80:ea:
2f:1f:b0:5b:0f:38:2a:5a:08:6b:05:ee:b0:20:98:
02:f5:ae:4b:d9:12:a4:f5:42:d4:76:bc:e6:91:51:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:DC:65:7C:58:94:B6:10:0D:70:95:07:7B:CE:44:E5:06:08:8D
X509v3 Authority Key Identifier:
keyid:EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:08:f2:05:72:98:eb:db:ae:27:ba:66:c4:d9:bb:bc:75:92:
bc:d4:cb:9b:cd:6e:53:23:b6:c9:fb:c3:a9:dc:0e:19:b0:29:
22:66:e4:be:70:e4:cc:96:51:ac:c8:7b:9c:53:5b:10:e8:df:
bd:2a:d9:d4:f2:27:d8:79:42:4b:25:c1:c9:de:36:95:67:1c:
9b:45:f9:db:5b:d9:3a:a2:82:b4:4a:a3:a4:7c:f0:4a:5d:5d:
b3:fe:12:3b:fd:eb:f3:1a:01:da:83:e7:2a:58:a2:b1:d9:5a:
a8:35:33:b2:a5:c0:1d:b2:fa:81:dc:bc:6b:94:7e:43:df:37:
70:07:26:b1:95:49:74:e1:e3:a9:bd:b3:2c:6f:8b:f1:de:91:
5b:be:0c:3a:d4:b7:4a:73:54:46:f4:12:df:33:71:b6:f2:38:
06:ef:8b:aa:1e:23:34:7e:5d:43:77:cc:94:48:8d:69:73:ab:
b7:99:b9:66:e1:97:d1:82:74:2c:62:c7:fe:df:90:cf:eb:24:
e6:d9:02:89:c4:d5:a8:8d:33:a4:3e:17:0f:3a:f5:c3:2d:5b:
72:b9:bd:ac:9b:51:06:b0:f6:dd:ff:61:70:05:e2:4b:9d:75:
bd:9b:7e:48:2f:9a:61:4c:bd:ea:36:89:35:ef:7a:8b:f4:90:
7e:45:8a:96
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcj+Pl/JZeX4bVcyg/MqXeds0XnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY5NzkwNzJGQkY2REFCRDJBOEVBQzA4QTMwNDUwOUU4
REMwNEM2NjAeFw0yNjA0MTgxNTE2NTFaFw0yNjA0MjEyMDAzNTFaMDMxMTAvBgNV
BAMTKDgzMTdEQzY1N0M1ODk0QjYxMDBENzA5NTA3N0JDRTQ0RTUwNjA4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrS0zoVf08IZVzwnaWApjW1fd
0vgYCXyoO7xl5/IVAPHjDx9dA2kPeWfDQOgaKRkM/LVVj2uXWJPYO6ZpeyE1kfg3
YnjtTQbX/FbNmQl11FMR+bS9Hjtvxp3+mb9kcZlEouigkNK4zOj0H8nNSGemchVZ
l4z0MJ/h8zHhTkQtj/tk884Z0pkEd0E0fR1pINa3gaDobE+GI/ZhIwT+1vmfKrv1
9alguKz2VgztnKOQKvLyMLThsgVFuU04mQWj5XMvQehREXTXtliq/ORePudFcevZ
H4MuMAWZzlPgz2+A6i8fsFsPOCpaCGsF7rAgmAL1rkvZEqT1QtR2vOaRUYljAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgxfcZXxYlLYQDXCVB3vOROUGCI0wHwYDVR0j
BBgwFoAU75eQcvv22r0qjqwIowRQno3ATGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NmMwMDM3Ni0zMzUxLTRmYTMtOTdlZS01MjM4NWJhNGQ5MDMvMC9FRjk3OTA3MkZC
RjZEQUJEMkE4RUFDMDhBMzA0NTA5RThEQzA0QzY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUY5NzkwNzJGQkY2REFCRDJBOEVBQzA4QTMwNDUwOUU4REMw
NEM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3
ZWUtNTIzODViYTRkOTAzLzAvRUY5NzkwNzJGQkY2REFCRDJBOEVBQzA4QTMwNDUw
OUU4REMwNEM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADMI8gVymOvbrie6ZsTZu7x1krzUy5vNblMj
tsn7w6ncDhmwKSJm5L5w5MyWUazIe5xTWxDo370q2dTyJ9h5QkslwcneNpVnHJtF
+dtb2TqigrRKo6R88EpdXbP+Ejv96/MaAdqD5ypYorHZWqg1M7KlwB2y+oHcvGuU
fkPfN3AHJrGVSXTh46m9syxvi/HekVu+DDrUt0pzVEb0Et8zcbbyOAbvi6oeIzR+
XUN3zJRIjWlzq7eZuWbhl9GCdCxix/7fkM/rJObZAonE1aiNM6Q+Fw869cMtW3K5
vaybUQaw9t3/YXAF4kuddb2bfkgvmmFMveo2iTXveov0kH5FipY=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:19 2026 by rpki-client